CVE-2026-23422

HIGH EPSS 2.2%
Published Apr 3, 20262mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Apr 3, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ handler") introduces a range check for if_id to avoid an out-of-bounds access. If an out-of-bounds if_id is detected, the interrupt status is not cleared. This may result in an interrupt storm. Clear the interrupt status after detecting an out-of-bounds if_id to avoid the problem. Found by an experimental AI code review agent at Google.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
2.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 14

VendorProductVersionRange
linuxlinux_kernel*≥5.15.200  –  <5.15.203
linuxlinux_kernel*≥6.1.163  –  <6.1.167
linuxlinux_kernel*≥6.6.124  –  <6.6.130
linuxlinux_kernel*≥6.12.70  –  <6.12.77
linuxlinux_kernel*≥6.18.10  –  <6.18.17
linuxlinux_kernel*≥6.19.1  –  <6.19.7
linuxlinux_kernel6.19any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 7

  • git.kernel.org https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703
    Patch